Re: [OS-BUILD PATCHv4] uki-virt: add systemd-cryptsetup module

2024-09-11 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3339#note_2100290296 Strange behavior. With the `CSMODULE` variable the `if` becomes somewhat pointless though, I think you can shortcut this to `dracutmodules+=" $CSMODULE "`. -- __

Re: [OS-BUILD PATCHv2] uki-virt: add systemd-cryptsetup module

2024-09-11 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/3339#note_2099439160 I'd suggest `if dracut --list-modules | grep -q systemd-cryptsetup; then ...` -- ___ kernel mailing list -- kernel@lists.fedoraproject.org

Re: [OS-BUILD PATCHv3 0/6] secure boot signing updates

2024-04-24 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2849#note_1878749882 only rhel and fedora have a new (15.8) shim, centos stream not yet ... -- ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsub

[OS-BUILD PATCH] uki: use systemd-pcrphase dracut module

2024-02-22 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann uki: use systemd-pcrphase dracut module dracut in Fedora 39 ships a systemd-pcrphase module. Use that instead of copying over files manually via install_items+="..." Signed-off-by: Gerd Hoffmann diff --git a/redhat/dracut-virt.conf b/redhat/dracut-virt.conf index blahblah.

Re: [OS-BUILD PATCHv2 0/2] uki-virt: add virtiofs dracut module

2023-12-15 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2817#note_1696083562 If you boot with an initrd it will be the initrd not the kernel which handles the root= command line. So maybe mkosi has built-in support for virtiofs, or it passes control back to th

Re: [OS-BUILD PATCHv2 0/2] uki-virt: add virtiofs dracut module

2023-12-14 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2817#note_1694811799 We need the dracut module included nevertheless, to make root=virtiofs: work when booting with an initrd. Independent from that we can consider switching virtiofs.ko to built-in, to a

Re: [OS-BUILD PATCHv2] aarch64: enable uki

2023-11-09 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2818#note_1641304014 Fixed now. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedoraproject.org Fe

[OS-BUILD PATCHv2] aarch64: enable uki

2023-11-09 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann aarch64: enable uki Now, with CONFIG_EFI_ZBOOT enabled and aarch64 kernels being self-unpacking efi binaries instead of gzipped images, building aarch64 UKIs actually works. Flip the switch and enable them. Also add descriptions and scripts for the 16k and 64k kernel varian

Re: [OS-BUILD PATCH] aarch64: enable uki

2023-11-08 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2818#note_1639217733 https://gitlab.com/cki-project/containers/-/issues/48 ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email

Re: [OS-BUILD PATCH] aarch64: enable uki

2023-11-08 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2818#note_1639095391 Yes, that is expected. I see you've created a MR for the build container meanwile. Thanks. ___ kernel mailing list -- kernel@lists.fedorap

[OS-BUILD PATCH] aarch64: enable uki

2023-11-08 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann aarch64: enable uki Now, with CONFIG_EFI_ZBOOT enabled and aarch64 kernels being self-unpacking efi binaries instead of gzipped images, building aarch64 UKIs actually works. Flip the switch and enable them. Signed-off-by: Gerd Hoffmann diff --git a/redhat/kernel.spec.temp

[OS-BUILD PATCHv2 2/2] uki-virt: add systemd-sysext dracut module

2023-11-07 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann uki-virt: add systemd-sysext dracut module Allows the initrd being extended using sysext. Signed-off-by: Gerd Hoffmann diff --git a/redhat/dracut-virt.conf b/redhat/dracut-virt.conf index blahblah..blahblah 100644 --- a/redhat/dracut-virt.conf +++ b/redhat/dracut-virt.conf

[OS-BUILD PATCHv2 1/2] uki-virt: add virtiofs dracut module

2023-11-07 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann uki-virt: add virtiofs dracut module Need to support root filesystem on virtiofs. Signed-off-by: Gerd Hoffmann diff --git a/redhat/dracut-virt.conf b/redhat/dracut-virt.conf index blahblah..blahblah 100644 --- a/redhat/dracut-virt.conf +++ b/redhat/dracut-virt.conf @@ -14,

[OS-BUILD PATCHv2 0/2] uki-virt: add virtiofs dracut module

2023-11-07 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2817 Need to support root filesystem on virtiofs. Signed-off-by: Gerd Hoffmann --- redhat/dracut-virt.conf | 6 ++ 1 files changed, 6 insertions(+), 0 deletions(-) _

[OS-BUILD PATCH 0/0] uki-virt: add virtiofs dracut module

2023-11-07 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2817 NOTE: Truncated patchset due to missing public @redhat.com email address on your GitLab profile at https://gitlab.com/-/profile. Once that is fixed, close and reopen the merg

[OS-BUILD PATCHv3] aarch64: enable zboot

2023-02-09 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann aarch64: enable zboot Enable CONFIG_EFI_ZBOOT. Also adapt %make_target and %kernel_image for zboot. With the kernel self-uncompressing itself the bootloader or the systemd-stub doesn't need to handle the uncompressing (and doesn't need to know how the kernel is compressed,

Re: [OS-BUILD PATCHv2] aarch64: enable zboot

2023-02-09 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2283#note_1271782893 Committed as 731c4eac848ff9dd42776da8ed3407b257e3abf0 and landed in 6.2-rc1 ___ kernel mailing list -- kernel@lists.fedoraproject.org To uns

[OS-BUILD PATCHv2] aarch64: enable zboot

2023-02-08 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann aarch64: enable zboot Enable CONFIG_EFI_ZBOOT. Also adapt %make_target and %kernel_image for zboot. With the kernel self-uncompressing itself the bootloader or the systemd-stub doesn't need to handle the uncompressing (and doesn't need to know how the kernel is compressed,

[OS-BUILD PATCH] aarch64: enable zboot

2023-02-08 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann aarch64: enable zboot Enable CONFIG_EFI_ZBOOT. Also adapt %make_target and %kernel_image for zboot. Signed-off-by: Gerd Hoffmann diff --git a/redhat/configs/fedora/generic/CONFIG_EFI_ZBOOT b/redhat/configs/fedora/generic/CONFIG_EFI_ZBOOT index blahblah..blahblah 100644 -

Re: [OS-BUILD PATCHv3] redhat: Add sub-RPM with a EFI unified kernel image for virtual machines

2023-01-20 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2175#note_1247136188 Tested, works fine indeed. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an email to kernel-le...@lists.fedo

Re: [OS-BUILD PATCHv3] redhat: Add sub-RPM with a EFI unified kernel image for virtual machines

2023-01-19 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2175#note_1246079266 Yes, kernel-core should continue to be the default, unless you explicitly ask for something else. But it should be possible to ask for something else and drop kernel-core in that case

Re: [OS-BUILD PATCHv2] redhat: Add sub-RPM with a EFI unified kernel image for virtual machines

2023-01-19 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2175#note_1245908862 Well, at the end of the days we want kernel-uki-virt be able to replace kernel-core, so kernel images using the UKI don't end up having two kernels installed. But maybe it's better to

[OS-BUILD PATCHv6 1/2] split sub-rpm kernel-modules-core from kernel-core

2023-01-12 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann split sub-rpm kernel-modules-core from kernel-core All kernel modules plus support files (such as the files generated by depmod) are moved to the new kernel-modules-core sub-rpm. The kernel binary plus support files stay in the kernel-core sub-rpm. This essentially includes

[OS-BUILD PATCHv6 2/2] modules-core: use %posttrans

2023-01-12 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann modules-core: use %posttrans Otherwise depmod might not be present yet. Signed-off-by: Gerd Hoffmann diff --git a/redhat/kernel.spec.template b/redhat/kernel.spec.template index blahblah..blahblah 100755 --- a/redhat/kernel.spec.template +++ b/redhat/kernel.spec.template @

[OS-BUILD PATCHv6 0/2] split sub-rpm kernel-modules-core from kernel-core

2023-01-12 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179 All kernel modules plus support files (such as the files generated by depmod) are moved to the new kernel-modules-core sub-rpm. The kernel binary plus support files stay in the kernel-

[OS-BUILD PATCHv5 0/0] split sub-rpm kernel-modules-core from kernel-core

2023-01-11 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179 NOTE: Truncated patchset since committer email 'kernel-t...@fedoraproject.org' does not match the submitter's GitLab public email address 'kra...@redhat.com'. All kernel modu

Re: [OS-BUILD PATCHv4 0/0] split sub-rpm kernel-modules-core from kernel-core

2023-01-11 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179#note_1236168298 Oops, didn't notice they sneaked in on rebase. Will fix. ___ kernel mailing list -- kernel@lists.fedoraproject.org To unsubscribe send an e

[OS-BUILD PATCHv4 0/0] split sub-rpm kernel-modules-core from kernel-core

2023-01-10 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179 NOTE: Truncated patchset since committer email 'kernel-t...@fedoraproject.org' does not match the submitter's GitLab public email address 'kra...@redhat.com'. All kernel modu

[OS-BUILD PATCHv3 0/0] split sub-rpm kernel-modules-core from kernel-core

2023-01-03 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179 NOTE: Truncated patchset since committer email 'kernel-t...@fedoraproject.org' does not match the submitter's GitLab public email address 'kra...@redhat.com'. All kernel modu

[OS-BUILD PATCHv2 0/0] split sub-rpm kernel-modules-core from kernel-core

2023-01-02 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann on gitlab.com Merge Request: https://gitlab.com/cki-project/kernel-ark/-/merge_requests/2179 NOTE: Truncated patchset since committer email 'kernel-t...@fedoraproject.org' does not match the submitter's GitLab public email address 'kra...@redhat.com'. All kernel modu

[OS-BUILD PATCH] split sub-rpm kernel-modules-core from kernel-core

2022-12-19 Thread Gerd Hoffmann (via Email Bridge)
From: Gerd Hoffmann split sub-rpm kernel-modules-core from kernel-core All kernel modules plus support files (such as the files generated by depmod) are moved to the new kernel-modules-core sub-rpm. The kernel binary plus support files stay in the kernel-core sub-rpm. This essentially includes